Oliver, Scott thank you guys for the tips!

This saves a lot of work for me!

Regards,
Cho



On Thu, May 18, 2017 at 9:49 PM, Scott Hardin <sc...@hnsc.de> wrote:

> Hi Cho,
>
> In case you're not that familiar with Perl... you can use a
> locally-modified copy and put it in a directory that is earlier in the INC
> path to override the standard OpenXPKI classes. Then your copy won't be
> overwritten by the original on the next update, but you'll need to make
> sure your local modifications remain code-compatible.
>
> Used with care, this has been very helpful in some of our customer
> installations for special situations.
>
> Hope this helps,
>
> Scott
>
>
>
> > On May 18, 2017, at 19:28, Oliver Welter <m...@oliwel.de> wrote:
> >
> > Hi Cho,
> >
> > not by config, but with a minor change to the class. In the
> CertificateExport.pm file, look around line 45:
> >
> >
> >   my $p = {
> >      IDENTIFIER =>  $cert_identifier,
> >      FORMAT => $key_format,
> >      PASSWORD => $key_password,
> >      ALIAS => $alias,
> >   };
> >
> > and add "KEEPROOT => 1"  to the parameter list. You should make a copy
> of the file and rename it, otherwise it will be overriden by the next
> update.
> >
> > Oli
> >
> >
> > Am 17.05.2017 um 12:14 schrieb Cho Chan:
> >> Hi all,
> >>
> >> when I download private key in pkcs12/jks format -> the generated file
> >> format contains private key, public certs + Issuing/Intermediate CA. Is
> >> there a possibility to include also RootCA inside?
> >>
> >> I found out the following workflow: certificate_privkey_export.yaml
> >> containing the class
> >> OpenXPKI::Server::Workflow::Activity::Tools::CertificateExport which
> >> based on the documentation is supporting parameter template with
> >>        chain
> >>            An ARRAY of PEM encoded intermediates, might be empty.
> >>
> >> it is written only intermediates, but not Root one... Is there such
> >> possibility and if yes can you please give me some details how to do it?
> >>
> >> Thank you in advance!
> >>
> >> Regards,
> >> Cho
> >>
> >>
> >> ------------------------------------------------------------
> ------------------
> >> Check out the vibrant tech community on one of the world's most
> >> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> >>
> >>
> >>
> >> _______________________________________________
> >> OpenXPKI-users mailing list
> >> OpenXPKI-users@lists.sourceforge.net
> >> https://lists.sourceforge.net/lists/listinfo/openxpki-users
> >>
> >
> >
> > --
> > Protect your environment -  close windows and adopt a penguin!
> >
> > ------------------------------------------------------------
> ------------------
> > Check out the vibrant tech community on one of the world's most
> > engaging tech sites, Slashdot.org! http://sdm.link/slashdot______
> _________________________________________
> > OpenXPKI-users mailing list
> > OpenXPKI-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/openxpki-users
>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> OpenXPKI-users mailing list
> OpenXPKI-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/openxpki-users
>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
OpenXPKI-users mailing list
OpenXPKI-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to